setenforce 0
sed -i "s/^SELINUX=.*$/SELINUX=disabled/" /etc/selinux/config
Another better way to check what actually block the thing:
yum install policycoreutils-python -y
Check SELinux blocked policies:
audit2allow -a | grep -v "===\|^$" | sed -e '/#!!!!/,+1d'
This will probably report:
allow tftpd_t spacewalk_data_t:file read;
Install missing policies:
audit2allow -a -M local && semodule -i local.pp
Execute again profile:
audit2allow -a | grep -v "===\|^$" | sed -e '/#!!!!/,+1d'
This will report:
allow tftpd_t spacewalk_data_t:file open;
Install missing policies:
audit2allow -a -M local && semodule -i local.pp
Execute again Cobbler profile. Now it totaly hangs!Run again:
audit2allow -a | grep -v "===\|^$" | sed -e '/#!!!!/,+1d'
This will report:
allow tftpd_t spacewalk_data_t:file getattr;
Install missing policies:
audit2allow -a -M local && semodule -i local.pp
Hard reboot client and run again cobbler profile.Works.
Done.
At the end we needed to install these:
allow tftpd_t spacewalk_data_t:file read;
allow tftpd_t spacewalk_data_t:file open;
allow tftpd_t spacewalk_data_t:file getattr;
No comments:
Post a Comment